aiwg 2026.8.2 → 2026.8.3

package/agentic/code/addons/aiwg-utils/skills/install-plugin/SKILL.md

@@ -2,7 +2,7 @@
 namespace: aiwg
 name: install-plugin
 platforms: [all]
-description: Install Claude Code marketplace plugins with registry lookup, download, and local deployment
+description: Install Claude Code marketplace plugins or route local/Git wrappers through the supported package workflow
 ---
 
 # Install Plugin
@@ -28,6 +28,8 @@ Alternate expressions and non-obvious activations (primary phrases are matched a
 | Claude Code plugin | "install claude code plugin utils" | Run `aiwg install-plugin utils@aiwg` |
 | Dry run | "show me what installing sdlc would do" | Run `aiwg install-plugin sdlc@aiwg --dry-run` |
 | Specific version | "install sdlc version 2026.3.0" | Run `aiwg install-plugin sdlc@aiwg@2026.3.0` |
+| Local wrapper | "install this local plugin wrapper" | Run `aiwg install <path> --dry-run`, then `aiwg use <plugin-id>` |
+| Git wrapper | "install this plugin Git URL" | Run `aiwg install <git-url> --dry-run`, then `aiwg use <plugin-id>` |
 
 ## Behavior
 
@@ -55,6 +57,12 @@ When triggered:
 
    # Force reinstall even if already installed
    aiwg install-plugin sdlc@aiwg --force
+
+   # Standalone local/Git wrappers use the package installer, not the legacy
+   # manifest-only install-plugin backend.
+   aiwg install ./path/to/wrapper --dry-run
+   aiwg install https://example.invalid/owner/wrapper.git --dry-run
+   aiwg use <plugin-id>
    ```
 
 3. **Report the result** — name the installed marketplace wrapper and confirm which agents, skills, commands, and rules were deployed and where.

package/agentic/code/plugins/utils/skills/install-plugin/SKILL.md

@@ -2,7 +2,7 @@
 namespace: aiwg
 name: install-plugin
 platforms: [all]
-description: Install Claude Code marketplace plugins with registry lookup, download, and local deployment
+description: Install Claude Code marketplace plugins or route local/Git wrappers through the supported package workflow
 ---
 
 # Install Plugin
@@ -28,6 +28,8 @@ Alternate expressions and non-obvious activations (primary phrases are matched a
 | Claude Code plugin | "install claude code plugin utils" | Run `aiwg install-plugin utils@aiwg` |
 | Dry run | "show me what installing sdlc would do" | Run `aiwg install-plugin sdlc@aiwg --dry-run` |
 | Specific version | "install sdlc version 2026.3.0" | Run `aiwg install-plugin sdlc@aiwg@2026.3.0` |
+| Local wrapper | "install this local plugin wrapper" | Run `aiwg install <path> --dry-run`, then `aiwg use <plugin-id>` |
+| Git wrapper | "install this plugin Git URL" | Run `aiwg install <git-url> --dry-run`, then `aiwg use <plugin-id>` |
 
 ## Behavior
 
@@ -55,6 +57,12 @@ When triggered:
 
    # Force reinstall even if already installed
    aiwg install-plugin sdlc@aiwg --force
+
+   # Standalone local/Git wrappers use the package installer, not the legacy
+   # manifest-only install-plugin backend.
+   aiwg install ./path/to/wrapper --dry-run
+   aiwg install https://example.invalid/owner/wrapper.git --dry-run
+   aiwg use <plugin-id>
    ```
 
 3. **Report the result** — name the installed marketplace wrapper and confirm which agents, skills, commands, and rules were deployed and where.

package/dist/src/cli/handlers/subcommands.js

@@ -1062,6 +1062,7 @@ export const installPluginHandler = {
         const runner = createScriptRunner(frameworkRoot);
         return runner.run("tools/plugin/plugin-installer-cli.mjs", ctx.args, {
             cwd: ctx.cwd,
+            env: { AIWG_ROOT: frameworkRoot },
         });
     },
 };

package/dist/src/cli/handlers/use.js

@@ -31,7 +31,7 @@ import { PROJECT_LOCAL_TYPE_TO_DIR } from '../../extensions/project-local-paths.
 import { buildUpstreamRegistry } from '../../extensions/upstream-registry.js';
 import { resolveShadows, formatShadowReport, } from '../../extensions/shadow-resolver.js';
 import { appendProjectLocalActivity, emitDiscoverEventsDeduped, } from '../../extensions/project-local-activity.js';
-import { hashBundleArtifacts } from '../../extensions/project-local-remove.js';
+import { hashBundleArtifacts, hashDeployedBundleArtifacts, } from '../../extensions/project-local-remove.js';
 import { installAiwgHooks } from '../../extensions/claude-hooks-installer.js';
 import { detectScope, mirrorToUserScope, rejectOpenClawProjectScope, USER_SCOPE_PATHS, } from '../scope-resolver.js';
 import { maybeWarnProjectIsolation } from '../project-isolation/index.js';
@@ -1185,6 +1185,7 @@ async function deployProjectLocalBundles(opts) {
                 // #1037 — record per-artifact source hashes so `aiwg remove` can
                 // detect pristine vs mutated vs replaced deployed files.
                 const artifactHashes = await hashBundleArtifacts(bundle.artifactPath);
+                const deployedArtifactHashes = await hashDeployedBundleArtifacts(projectDir, provider, artifactHashes);
                 const updated = updateInstalled(config, bundle.id, provider, result.counts, {
                     version: bundle.manifest.version,
                     source: 'project-local',
@@ -1193,6 +1194,7 @@ async function deployProjectLocalBundles(opts) {
                     localType: bundle.type,
                     manifestVersion: bundle.manifest.manifestVersion,
                     artifactHashes,
+                    deployedArtifactHashes,
                 });
                 await writeAiwgConfig(projectDir, updated);
             }

package/dist/src/config/aiwg-config.js

@@ -784,6 +784,10 @@ export function updateInstalled(config, name, provider, counts, opts) {
             existing.manifestVersion = opts.manifestVersion;
         if (opts.artifactHashes)
             existing.artifactHashes = opts.artifactHashes;
+        if (opts.deployedArtifactHashes) {
+            existing.deployedArtifactHashes ??= {};
+            existing.deployedArtifactHashes[provider] = opts.deployedArtifactHashes;
+        }
     }
     else {
         // Clear stale project-local fields if a previously project-local entry is
@@ -792,6 +796,7 @@ export function updateInstalled(config, name, provider, counts, opts) {
         delete existing.localType;
         delete existing.manifestVersion;
         delete existing.artifactHashes;
+        delete existing.deployedArtifactHashes;
     }
     config.installed[name] = existing;
     return config;

package/dist/src/extensions/project-local-doctor.js

@@ -12,8 +12,7 @@
  * @design @.aiwg/architecture/design-doctor-log-promote.md
  * @implements #1037
  */
-import { join, resolve } from 'path';
-import { homedir } from 'os';
+import { join } from 'path';
 import { discoverProjectLocalBundles } from './project-local-discovery.js';
 import { buildUpstreamRegistry } from './upstream-registry.js';
 import { resolveShadows } from './shadow-resolver.js';
@@ -22,6 +21,7 @@ import { sha256OfFileRawAndNormalized } from './managed-marker.js';
 import { projectAiwgPath } from '../config/project-artifacts.js';
 import { projectRelativePathIfInside } from './project-local-paths.js';
 import { auditProjectQuickref } from './project-quickref.js';
+import { artifactHashesForProvider, candidateDeployedPaths } from './project-local-remove.js';
 /**
  * Hash a deployed file in raw and managed-marker-normalized forms. Returns
  * null on read errors (e.g., file missing — caller treats as
@@ -48,23 +48,6 @@ const TYPE_DIR = {
     plugin: 'plugins',
     provider: 'providers',
 };
-// Per PUW-026 (#1127): home-deploying providers get absolute prefixes so
-// `resolve(projectDir, prefix)` correctly produces the home-rooted path
-// (resolve treats absolute paths as authoritative). Previously these were
-// `null`, which silently skipped lifecycle operations against home-deployed
-// project-local bundles.
-const PROVIDER_PREFIX = {
-    claude: '.claude',
-    cursor: '.cursor',
-    factory: '.factory',
-    opencode: '.opencode',
-    windsurf: '.windsurf',
-    warp: '.warp',
-    codex: '.codex',
-    copilot: '.github',
-    openclaw: resolve(homedir(), '.openclaw'),
-    hermes: resolve(homedir(), '.hermes'),
-};
 export async function buildProjectLocalDoctorSection(opts) {
     const { projectDir, frameworkRoot, config, quiet = false } = opts;
     const discovery = await discoverProjectLocalBundles(projectDir);
@@ -165,18 +148,19 @@ export async function buildProjectLocalDoctorSection(opts) {
             const entry = config.installed[bundle.id];
             if (!entry || entry.source !== 'project-local')
                 continue;
-            const hashes = entry.artifactHashes;
-            if (!hashes) {
+            if (!entry.artifactHashes && !entry.deployedArtifactHashes) {
                 unhashedSeen = true;
                 continue;
             }
             for (const provider of Object.keys(entry.deployedTo)) {
-                const prefix = PROVIDER_PREFIX[provider];
-                if (!prefix)
-                    continue;
+                const hashes = artifactHashesForProvider(entry, provider);
                 for (const [sourceRel, expectedHash] of Object.entries(hashes)) {
-                    const deployedAbs = resolve(projectDir, `${prefix}/${sourceRel}`);
-                    const actualHash = await hashDeployed(deployedAbs);
+                    let actualHash = null;
+                    for (const deployedAbs of candidateDeployedPaths(projectDir, provider, sourceRel)) {
+                        actualHash = await hashDeployed(deployedAbs);
+                        if (actualHash)
+                            break;
+                    }
                     if (actualHash === null) {
                         // Missing — not drift, deploy is just absent
                         continue;

package/dist/src/extensions/project-local-remove.js

@@ -93,6 +93,34 @@ export async function hashBundleArtifacts(bundleAbsPath) {
     }
     return out;
 }
+/**
+ * Hash the provider-transformed files produced by a successful deployment.
+ * The source hash map supplies the canonical inventory/key shape; values are
+ * read from the first canonical provider path that exists.
+ */
+export async function hashDeployedBundleArtifacts(projectDir, provider, sourceHashes) {
+    const deployed = {};
+    for (const [sourceRel, sourceHash] of Object.entries(sourceHashes)) {
+        // Keep the complete inventory if a provider path unexpectedly cannot be
+        // resolved. Removal then fails safely instead of clearing the registry
+        // while leaving an untracked provider artifact behind.
+        deployed[sourceRel] = sourceHash;
+        for (const candidate of candidateDeployedPaths(projectDir, provider, sourceRel)) {
+            try {
+                deployed[sourceRel] = await sha256Hex(candidate);
+                break;
+            }
+            catch {
+                // Try translated/provider-alternate paths before leaving it absent.
+            }
+        }
+    }
+    return deployed;
+}
+/** Resolve current provider hashes while preserving old registry entries. */
+export function artifactHashesForProvider(entry, provider) {
+    return entry.deployedArtifactHashes?.[provider] ?? entry.artifactHashes ?? {};
+}
 /** Resolve a recorded source-relative artifact through the canonical provider
  * definition rather than assuming every artifact lives directly under the
  * provider prefix (#1869). Returned paths are absolute for both project- and
@@ -111,6 +139,11 @@ export function candidateDeployedPaths(projectDir, provider, sourceRel) {
     const tail = sourceRel.slice(separator + 1);
     const absoluteRoot = isAbsolute(root) ? root : resolve(projectDir, root);
     const candidates = [join(absoluteRoot, tail)];
+    // Codex discovers project skills from the shared native `.agents/skills`
+    // root while retaining `.codex` as its compatibility deployment surface.
+    if (provider === 'codex' && artifactType === 'skills') {
+        candidates.unshift(join(resolve(projectDir, '.agents', 'skills'), tail));
+    }
     // Provider adapters may translate source extensions.
     if (provider === 'cursor' && artifactType === 'rules' && tail.endsWith('.md')) {
         candidates.push(join(absoluteRoot, `${tail.slice(0, -3)}.mdc`));
@@ -186,12 +219,10 @@ function resolveOwnership(config, selfBundleId, provider, sourceRel) {
             continue;
         if (entry.source !== 'project-local')
             continue;
-        if (!entry.artifactHashes)
-            continue;
-        if (sourceRel in entry.artifactHashes) {
+        const hashes = artifactHashesForProvider(entry, provider);
+        if (sourceRel in hashes) {
             // Same source-rel path claimed by another project-local bundle —
             // the deployed file (if present) is theirs, not ours.
-            void provider;
             return name;
         }
     }
@@ -219,12 +250,12 @@ export async function removeProjectLocalBundle(config, projectDir, bundleId, opt
     const { force = false, provider: onlyProvider, dryRun = false, keepRegistry = false } = opts;
     const confirmMutation = opts.confirmMutation ?? (async () => false);
     const installedEntry = entry;
-    const artifactHashes = installedEntry.artifactHashes ?? {};
     const providers = Object.keys(installedEntry.deployedTo).filter(p => !onlyProvider || p === onlyProvider);
     const outcomes = [];
     const revertedProviders = [];
     const partialProviders = [];
     for (const provider of providers) {
+        const artifactHashes = artifactHashesForProvider(installedEntry, provider);
         let providerHadSkip = false;
         for (const sourceRel of Object.keys(artifactHashes)) {
             const owner = resolveOwnership(config, bundleId, provider, sourceRel);
@@ -334,6 +365,12 @@ export async function removeProjectLocalBundle(config, projectDir, bundleId, opt
         // Mutate registry for fully-reverted providers
         if (!dryRun && !keepRegistry && !providerHadSkip) {
             delete installedEntry.deployedTo[provider];
+            if (installedEntry.deployedArtifactHashes) {
+                delete installedEntry.deployedArtifactHashes[provider];
+                if (Object.keys(installedEntry.deployedArtifactHashes).length === 0) {
+                    delete installedEntry.deployedArtifactHashes;
+                }
+            }
         }
     }
     // Top-level remove activity entry

package/docs/addons/aiwg-utils/security/supply-chain/external-npm/README.md

@@ -19,7 +19,7 @@ This directory tracks external npm package audit evidence for the current depend
 
 | Package | Version | Tracking | Native/Binary/Lifecycle Surface | Status | Report |
 |---|---:|---|---|---|---|
-| `@modelcontextprotocol/sdk` | `1.29.0` | #1444, #1447 | no | complete | [report](modelcontextprotocol__sdk.md) |
+| `@modelcontextprotocol/sdk` | `1.30.0` | #1444, #1447, #1973 | no | complete | [report](modelcontextprotocol__sdk.md) |
 | `chalk` | `4.1.2` | #1444 | no | complete | [report](chalk.md) |
 | `chokidar` | `4.0.3` | #1444 | no | complete | [report](chokidar.md) |
 | `commander` | `12.1.0` | #1444, #1447 | no | complete | [report](commander.md) |

package/docs/addons/aiwg-utils/security/supply-chain/external-npm/modelcontextprotocol__sdk.md

@@ -1,6 +1,6 @@
 # @modelcontextprotocol/sdk External NPM Supply-Chain Audit
 
-Generated: 2026-05-23
+Updated: 2026-08-03
 
 ## Scope
 
@@ -8,7 +8,7 @@ Generated: 2026-05-23
 |---|---|
 | Package | `@modelcontextprotocol/sdk` |
 | Canonical upstream repository | https://github.com/modelcontextprotocol/typescript-sdk.git |
-| Audited version/ref | `1.24.3` / `724fe6eefeeb7f71328bc43c223fc9abd3df491e` |
+| Audited version/ref | `1.30.0` / npm registry release |
 | npm registry signatures | 1 |
 | Dependency source summary | `ajv`, `cors`, `cross-spawn`, `express`, `jose`, `raw-body`, `zod`, `@hono/node-server` |
 | Optional dependency summary | (none) |
@@ -19,12 +19,13 @@ Generated: 2026-05-23
 
 | Manifest | Field | Spec | Lockfile Version | Integrity | Install Script | Optional Lock Entry | Tracking |
 |---|---|---:|---:|---|---|---|---|
-| `package.json` | `dependencies` | `^1.24.0` | `1.24.3` | yes | no | no | #1444 |
+| `package.json` | `dependencies` | `^1.30.0` | `1.30.0` | yes | no | no | #1444, #1973 |
+| `packages/cli/package.json` | `dependencies` | `^1.30.0` | `1.30.0` | yes | no | no | #1973 |
 | `agentic/code/addons/droid-bridge/package.json` | `dependencies` | `^1.0.0` | `1.25.2` | yes | no | no | #1447 |
 
 ## Lockfile Tarballs
 
-- package.json: https://registry.npmjs.org/@modelcontextprotocol/sdk/-/sdk-1.24.3.tgz
+- package.json and packages/cli/package.json: https://registry.npmjs.org/@modelcontextprotocol/sdk/-/sdk-1.30.0.tgz
 - agentic/code/addons/droid-bridge/package.json: https://registry.npmjs.org/@modelcontextprotocol/sdk/-/sdk-1.25.2.tgz
 
 ## Lifecycle And Native/Binary Review
@@ -58,7 +59,8 @@ Consumer install-time lifecycle scripts are `preinstall`, `install`, and `postin
 - AIWG usage context is documented with manifest path, dependency field, requested spec, and lockfile version where present.
 - Lockfile integrity is present for locked AIWG package entries.
 - Native, binary, optional, and lifecycle behavior is explicitly recorded for applicable package classes.
-- No immediate AIWG dependency change is required from this package alone.
+- Version 1.30.0 permits `@hono/node-server` v2, removing the Windows
+  serve-static advisory route retained by the 1.29.0 dependency range.
 
 ## Follow-Up
 

package/docs/agents/cli-reference.md

@@ -2163,12 +2163,20 @@ Install any of them with `/plugin install <name>@aiwg` after running `/plugin ma
 Install Claude Code plugin.
 
 ```bash
-aiwg install-plugin <name>
+aiwg install-plugin <name> [--source <local-path>] [--dry-run]
 ```
 
 **Arguments:**
 
 - `<name>` - Plugin name from marketplace
+- `--source <local-path>` - Compatibility input for legacy framework/add-on/extension manifests. Standalone plugin wrappers return an actionable migration to `aiwg install <path>` followed by `aiwg use <plugin-id>`.
+
+Git URLs and standalone local wrappers use the package workflow directly:
+
+```bash
+aiwg install <path-or-git-url> --dry-run
+aiwg use <plugin-id>
+```
 
 **Capabilities:** cli, plugin, install
 **Platform:** Claude Code only

package/docs/contributing/versioning.md

@@ -113,8 +113,10 @@ tools/release/cut-tag.sh 2026.X.Y
 # gate validates the signature against .gitea/keys/maintainers.asc)
 git push origin main --tags
 
-# Mirror the signed tag to GitHub (push it yourself — the mirror workflow
-# peels annotated tags; github-mirror.yml then creates the GitHub release)
+# Mirror the signed tag to GitHub. Push it yourself so GitHub receives the
+# original signed annotated tag object; the workflow never synthesizes or
+# peels a tag. github-mirror.yml waits up to five minutes for this push before
+# creating the verified GitHub release.
 git push github main --tags
 
 unset VAULT_CI_ROLE_ID VAULT_CI_SECRET_ID

package/docs/releases/_manifest.json

@@ -3,6 +3,7 @@
   "summary": "Release notes",
   "collapsed": true,
   "order": [
+    "v2026.8.3-announcement",
     "v2026.8.2-announcement",
     "v2026.8.1-announcement",
     "v2026.8.0-announcement",

package/docs/releases/v2026.8.3-announcement.md

@@ -0,0 +1,66 @@
+# AIWG 2026.8.3 - Plugin lifecycle and release reliability
+
+**Release date:** 2026-08-03
+**Channel:** stable
+
+AIWG 2026.8.3 fixes three lifecycle and publication regressions and moves the
+MCP server dependency graph onto the advisory-free Hono v2 line.
+
+## What changed
+
+- Project-local removal records the provider-transformed bytes that were
+  actually deployed. Freshly deployed skills are therefore removable as
+  pristine, while later user edits remain protected.
+- `aiwg install-plugin --source` handles local legacy manifests through the
+  correct framework root and gives project-local wrappers actionable guidance
+  to use `.aiwg/plugins/` plus `aiwg use`.
+- GitHub release creation waits for the operator-pushed signed annotated tag
+  and verifies its expected commit before publishing a stable release.
+- `@modelcontextprotocol/sdk` 1.30.0 allows the package graph to use
+  `@hono/node-server` 2.0.11, removing the affected Windows static-serving
+  dependency route.
+
+## Verification
+
+The release candidate passed the main test/build workflow, documentation
+build and deployment workflows, and Fortemi shard conformance on the delivered
+dependency commit. The production dependency audit reports no MCP SDK or Hono
+finding and no moderate-severity findings.
+
+## Package matrix
+
+All three packages publish in CalVer lockstep:
+
+```text
+aiwg@2026.8.3
+@aiwg/cli@2026.8.3
+@aiwg/cockpit@2026.8.3
+```
+
+## Upgrade
+
+Full local-corpus distribution:
+
+```bash
+npm install --global aiwg@2026.8.3
+```
+
+Lightweight signed-web distribution:
+
+```bash
+npm install --global @aiwg/cli@2026.8.3
+```
+
+Install or refresh Cockpit through the base CLI to keep its version in
+lockstep:
+
+```bash
+aiwg use cockpit
+aiwg cockpit
+```
+
+## Rollback
+
+Roll back all three packages together to `2026.8.2`. That version does not
+contain the plugin lifecycle fixes or the MCP SDK dependency update described
+above.

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "aiwg",
-  "version": "2026.8.2",
+  "version": "2026.8.3",
   "description": "Deployment tool and support utility for AI context. Copies agents, skills, commands, rules, and behaviors into the paths each AI platform reads (Claude Code, Codex, Copilot, Cursor, Warp, OpenClaw, and 6 more) so one source of truth works across 10 platforms. Optional utilities for persistent artifact memory, background orchestration, autonomous loops, and artifact indexing.",
   "type": "module",
   "bin": {
@@ -311,7 +311,7 @@
   },
   "dependencies": {
     "@fortemi/core": "2026.7.15",
-    "@modelcontextprotocol/sdk": "^1.29.0",
+    "@modelcontextprotocol/sdk": "^1.30.0",
     "chalk": "^4.1.2",
     "chokidar": "^4.0.3",
     "commander": "^12.1.0",